Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer (raw, json)
Hash identifier: 8gI+cCASiUjImbH3hVmAxfvt5uPp7H07Us7DU3m8coU=
Subject key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7C67
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Jun 2026 13:11:09 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 148.109.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31847 (0x7c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 4 13:11:09 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:a4:b8:e6:95:cd:fc:12:4a:e9:c0:6f:cc:
21:24:4d:00:59:cd:c4:ea:76:e0:61:e0:c7:43:28:
c8:f3:75:9d:63:36:1e:e9:2d:02:8b:60:e1:89:70:
8c:0e:61:38:a6:2a:1c:d6:e4:5e:ab:c2:43:58:b2:
ae:72:77:5b:66:cf:e6:55:9c:ca:d7:69:ba:bc:2c:
36:d4:c6:0a:88:0a:fb:0e:86:28:fa:63:a3:c4:77:
ec:56:13:43:8b:8f:54:aa:44:0f:7b:a0:7e:d4:41:
a7:93:72:1d:68:22:02:65:44:79:f0:e8:32:92:12:
a0:f2:ac:7f:d5:b9:1c:fd:26:11:a4:bd:25:b2:1d:
de:e2:60:46:ce:e0:20:e3:80:cb:d5:76:8a:5e:e2:
6c:45:38:d9:c0:8c:46:cf:be:e3:b8:77:be:95:df:
ac:30:e9:13:51:54:31:4e:26:0c:0e:b4:e2:2c:57:
12:96:5d:0f:de:2c:cb:ce:67:c4:66:99:35:e0:51:
3c:a0:93:01:c4:d8:fe:d1:4f:fe:93:05:06:13:9f:
b7:38:37:11:a6:44:b1:d8:d3:dd:74:18:1a:59:1a:
2e:a3:d2:7e:45:4c:e7:83:8c:4d:75:35:db:cc:5e:
88:32:ca:e4:39:d1:51:82:22:dc:02:47:93:71:6c:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:8b:a9:50:45:a5:30:d7:5a:37:bd:8c:e6:06:62:17:ee:f1:
f6:48:db:f7:3b:53:20:a5:15:e3:4d:a0:b0:d9:63:25:d7:ba:
a2:93:c3:f4:6d:ce:78:a9:2e:23:0b:ab:e6:76:ee:e8:dd:11:
a7:76:22:a5:e0:6d:cb:f3:61:3a:fe:50:a9:40:9f:da:fe:06:
27:7b:dc:2d:03:37:e4:44:e9:95:9d:79:cc:f5:b9:ae:a0:34:
69:c1:9a:3e:87:2f:4e:93:41:b4:f4:e5:9b:61:68:00:62:86:
53:c7:99:d8:e5:b3:ff:b0:a2:ab:b7:e4:f3:9f:00:dd:46:9d:
3b:b4:f1:77:e2:51:22:11:9e:6e:81:e7:47:02:f1:0a:f4:10:
8a:8f:8f:3c:d0:46:7c:1d:e5:c1:62:a2:09:4d:78:51:90:97:
a6:40:37:d3:82:ab:4b:e4:b2:4a:4f:e9:5d:7d:db:b5:13:8c:
bd:08:25:34:04:64:e4:c5:24:51:1e:64:26:00:4d:36:cf:f2:
96:d8:69:5a:44:75:56:e6:a8:2a:a9:53:0f:7f:97:39:b3:f7:
a3:8a:f0:4b:68:e2:34:31:90:a0:1d:e7:32:03:16:0d:cf:74:
b5:ed:36:d3:02:74:0c:59:1b:59:2f:ef:9a:9f:6f:15:ea:26:
27:29:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:33 2026 by rpki-client